build(deps): bump the actions-minor-and-patch group across 1 directory with 4 updates #89

	name: pip-audit

	on:
	push:
	branches: [main]
	pull_request:
	branches: [main]
	schedule:
	- cron: "13 5 * * 1" # Monday 05:13 UTC

	permissions: {}

	jobs:
	audit:
	name: Audit poetry.lock against OSV
	runs-on: ubuntu-latest
	permissions:
	contents: read

	steps:
	- name: Checkout
	uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
	with:
	persist-credentials: false

	- name: Set up Python
	uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
	with:
	python-version: "3.12"

	- name: Install Poetry
	uses: snok/install-poetry@a783c322200f0519c7926aa6faa857c4e23e9263 # v1

	- name: Export requirements from poetry.lock
	run: \|
	poetry self add poetry-plugin-export
	poetry export --without-hashes --format=requirements.txt --with=dev --output=requirements.txt

	- name: Run pip-audit
	uses: pypa/gh-action-pip-audit@1220774d901786e6f652ae159f7b6bc8fea6d266 # v1.1.0
	with:
	inputs: requirements.txt
	vulnerability-service: osv
	# diskcache transitively via pysigma. Drop once
	# https://github.com/grantjenks/python-diskcache/pull/361 ships.
	ignore-vulns: CVE-2025-69872

Navigation Menu